Skip to content
OpenAdvisories

Archive

23 October 2023

Vulnerabilities first published on this day (UTC), newest first.

← September 2023 2023 / October /23 November 2023 →
  1. 18
  2. 281
  3. 3138
  4. 4107
  5. 562
  6. 672
  7. 72
  8. 824
  9. 985
  10. 10256
  11. 11111
  12. 1288
  13. 1364
  14. 1430
  15. 1511
  16. 16168
  17. 17163
  18. 1874
  19. 19105
  20. 20125
  21. 2115
  22. 2226
  23. 2353
  24. 24122
  25. 25213
  26. 2690
  27. 2797
  28. 2813
  29. 2918
  30. 30171
  31. 31121
All Critical High Medium Low Exploited only Public exploit

53 results · Feed

  • Medium 5.5
    CVE-2023-46332

    WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop(), which lead to segmentation fault.

    wabt wabt wabt Debian Ubuntu PyPI
  • Unscored —
    CVE-2023-46603

    In International Color Consortium DemoIccMAX 79ecb74, there is an out-of-bounds read in the CIccPRMG::GetChroma functio…

  • Medium 5.5
    CVE-2023-46331

    WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation f…

    wabt wabt wabt Debian Ubuntu PyPI
  • Unscored —
    CVE-2023-46058

    Cross Site Scripting (XSS) vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary …

  • High 7.5
    CVE-2023-46324

    free5GC udm vulnerable to Invalid Curve Attack

    pkg/suci/suci.go in free5GC udm before 1.2.0, when Go before 1.19 is used, allows an Invalid Curve Attack because it may compute a shared secret via an uncompressed public key that has not been validated. An attacker can send arbitrary SUCIs to the UDM, which…

    github.com/free5gc/udm Go
  • Unscored —
    CVE-2023-46059

    Cross Site Scripting (XSS) vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary …

  • Unscored —
    CVE-2023-45998

    kodbox 1.44 is vulnerable to Cross Site Scripting (XSS). Customizing global HTML results in storing XSS.

  • High 7.5
    CVE-2023-45966 Public exploit

    umputun remark42 version 1.12.1 and before has a Blind Server-Side Request Forgery (SSRF) vulnerability.

  • Medium 5.4
    CVE-2023-44760 Public exploit

    Concrete CMS Cross-site Scripting vulnerability

    Multiple Cross Site Scripting (XSS) vulnerabilities in Concrete CMS v.9.2.1 allow an attacker to execute arbitrary code via a crafted script to the Header and Footer Tracking Codes of the SEO & Statistics. NOTE: the vendor disputes this because these header/f…

    concrete5/concrete5 Packagist
  • Unscored —
    CVE-2023-42295

    An issue in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of servic…

    openimageio openimageio Debian Ubuntu
  • Unscored —
    CVE-2023-37635 Public exploit

    UVDesk Community Skeleton v1.1.1 allows unauthenticated attackers to perform brute force attacks on the login page to g…

  • Unscored —
    CVE-2023-37636

    A stored cross-site scripting (XSS) vulnerability in UVDesk Community Skeleton v1.1.1 allows attackers to execute arbit…

  • Unscored —
    CVE-2023-43358 Public exploit

    Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a cr…